Privacy Policy
Last Updated: 14 February 2025 · Harmoni Counsel
1. Introduction
Harmoni Counsel ("we", "us", "our") is committed to protecting the personal data of individuals who engage our services or interact with our website. This Privacy Policy explains how we collect, use, store, and share personal information in the course of providing legal services and operating our website, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
By submitting your information through our website or engaging our services, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected].
2. Data Controller
The data controller for personal information collected through this website and our legal services is:
- Business Name: Harmoni Counsel
- Address: 22-A, Pusat Harmoni, Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia
- Email: [email protected]
- Phone: +60 3-8946 2173
3. Personal Data We Collect
We collect personal data when you contact us, engage our services, or use our website. The categories of data collected include:
- Identification data: full name, identification number (where required by law)
- Contact data: email address, telephone number, mailing address
- Matter-related data: insurance policy documents, claim materials, correspondence, and other information relevant to the legal matter you instruct us on
- Communication data: records of correspondence between you and Harmoni Counsel
- Website usage data: IP address, browser type, pages visited, and time on site (collected via cookies)
4. How We Collect Your Data
- Directly from you via our website contact form, telephone, or email
- Through your instructions when engaging our legal services
- Via automated technologies (cookies) when you browse our website
- From third parties where relevant to your legal matter (e.g., other legal practitioners, insurers, with your authorisation)
5. Legal Basis for Processing
We process your personal data on the following grounds:
- Contractual necessity: to perform the legal services you have engaged us to provide
- Legal obligation: to comply with our obligations as members of the Malaysian Bar and under applicable law
- Legitimate interests: to respond to enquiries and improve our services
- Consent: for optional communications such as service updates, where you have provided consent
6. How We Use Your Personal Data
- To provide and manage legal services you have instructed us on
- To communicate with you regarding your matter
- To respond to enquiries submitted via our website or by telephone
- To comply with legal professional obligations and regulatory requirements
- To maintain accurate business and matter records
- To improve the functionality and content of our website
7. Data Retention
We retain personal data for as long as is necessary for the purposes for which it was collected, subject to our obligations as legal practitioners:
- Client matter files: retained for a minimum of seven years after matter closure, in accordance with Malaysian Bar recommendations
- Website enquiry data: retained for twelve months from initial contact
- Billing and financial records: retained for the period required by Malaysian tax law
- Website analytics data: retained for up to twenty-four months
After the applicable retention period, data is securely deleted or anonymised.
8. Data Sharing
We do not sell, rent, or trade your personal data. We may share personal data in limited circumstances:
- With opposing parties, courts, or regulatory bodies where required by your instructions or by law
- With professional advisers (e.g., barristers, expert witnesses) engaged on your matter with your knowledge
- With service providers who assist our operations (e.g., secure cloud storage), bound by data processing agreements
- Where disclosure is required by applicable law or court order
9. Data Protection Measures
- Secure encrypted email and file transfer for sensitive documents
- Access controls limiting document access to personnel working on your matter
- Password-protected systems for client file storage
- Regular review of data handling practices
- Physical security at our office premises
In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you and the relevant authority as required by applicable law.
10. Cookies
Our website uses cookies to function correctly and to understand how visitors use our site. For full details of the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
11. Your Rights Under Malaysian Law
Under the Personal Data Protection Act 2010, you have the right to:
- Access personal data we hold about you
- Correct inaccurate or incomplete personal data
- Withdraw consent to processing (where consent is the basis)
- Request that we cease processing your data for direct marketing purposes
- Lodge a complaint with the Personal Data Protection Commissioner of Malaysia
To exercise any of these rights, contact us at [email protected]. We will respond within twenty-one days.
12. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.
13. Children's Privacy
Our services are directed to adults aged eighteen and above. We do not knowingly collect personal data from individuals under eighteen. If you believe we hold personal data about a minor, please contact us at [email protected] and we will take appropriate action.
14. International Transfers
Personal data is generally processed and stored within Malaysia. Where data is transferred outside Malaysia — for instance, where a cloud service provider operates internationally — we take steps to ensure appropriate safeguards are in place in accordance with the PDPA.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acknowledgement of the updated policy.
16. Contact Us
For questions or concerns regarding this Privacy Policy or the handling of your personal data:
- Email: [email protected]
- Post: Harmoni Counsel, 22-A, Pusat Harmoni, Jalan SS 15/4, 47500 Subang Jaya, Selangor
- Phone: +60 3-8946 2173